Fitness App Target of Data Hack

30 March 2018

The latest big-name company to fall victim to a data hack is smartphone workout app MyFitnessPal, who revealed it became aware of a massive data hack in February.

Amongst the stolen data was user names, encrypted passwords and email addresses of at least 150m app users.

The app’s owner, Under Armour, discovered the breach on 25 March 2018 and quickly began an investigation, with its Chief Digital Officer, Paul Fipps, writing to all customers to inform them of the breach.

"The affected information included usernames, email addresses, and hashed passwords - the majority with the hashing function called bcrypt used to secure passwords.

"Once we became aware, we quickly took steps to determine the nature and scope of the issue. We are working with leading data security firms to assist in our investigation. We have also notified and are co-ordinating with law enforcement authorities."

It appears that no credit card details or financial information has been lost, however, given the sensitive nature of the app, some users may be anxious to find out what personal physical information about them may have been taken, and subsequently made available online.

Nevertheless, the company has been applauded for its quick response time to the hack and compromise of the data.